{
"ok": true,
"domain": "thenewstack.io",
"generated_at": "2026-08-09T10:58:16-05:00",
"cache": {
"hit": true,
"ttl": 0
},
"score": {
"total": 87,
"label": "Good",
"categories": {
"dns": 100,
"mail": 90,
"security": 69,
"network": 70,
"availability": 100
},
"category_weights": {
"dns": 25,
"mail": 20,
"security": 25,
"network": 10,
"availability": 20
},
"items": [
{
"category": "dns",
"title": "IPv4 (A)",
"max_points": 30,
"earned_points": 30,
"lost_points": 0,
"detail": "3 IPv4 address(es) detected."
},
{
"category": "dns",
"title": "IPv6 (AAAA)",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "3 IPv6 address(es) detected."
},
{
"category": "dns",
"title": "Name server redundancy",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "2 NS record(s); 2 or more required."
},
{
"category": "dns",
"title": "SOA record",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Authoritative zone record."
},
{
"category": "dns",
"title": "DNSSEC chain",
"max_points": 15,
"earned_points": 15,
"lost_points": 0,
"detail": "DS and DNSKEY detected."
},
{
"category": "dns",
"title": "CAA policy",
"max_points": 5,
"earned_points": 5,
"lost_points": 0,
"detail": "Certificate authority restriction."
},
{
"category": "dns",
"title": "DNS propagation",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Agreement between public resolvers."
},
{
"category": "mail",
"title": "MX records",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "3 MX record(s)."
},
{
"category": "mail",
"title": "SPF",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "SPF policy published."
},
{
"category": "mail",
"title": "DMARC",
"max_points": 25,
"earned_points": 25,
"lost_points": 0,
"detail": "DMARC policy published."
},
{
"category": "mail",
"title": "DKIM",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "A DKIM selector was verified."
},
{
"category": "mail",
"title": "MTA-STS",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "Mail transport policy."
},
{
"category": "mail",
"title": "TLS-RPT",
"max_points": 5,
"earned_points": 0,
"lost_points": 5,
"detail": "TLS reporting policy."
},
{
"category": "security",
"title": "Valid TLS certificate",
"max_points": 55,
"earned_points": 55,
"lost_points": 0,
"detail": "67 day(s) remaining."
},
{
"category": "security",
"title": "Certificate lifetime",
"max_points": 10,
"earned_points": 10,
"lost_points": 0,
"detail": "Full points require at least 30 days remaining."
},
{
"category": "security",
"title": "HTTP security headers",
"max_points": 35,
"earned_points": 4,
"lost_points": 31,
"detail": "1 of 9 evaluated headers detected."
},
{
"category": "network",
"title": "PTR reverse DNS",
"max_points": 30,
"earned_points": 0,
"lost_points": 30,
"detail": "PTR not detected."
},
{
"category": "network",
"title": "IPv4 diversity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "Two or more IPv4 addresses receive full points."
},
{
"category": "network",
"title": "IPv6 connectivity",
"max_points": 35,
"earned_points": 35,
"lost_points": 0,
"detail": "AAAA availability."
},
{
"category": "availability",
"title": "DNS resolution",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "At least one address family must resolve."
},
{
"category": "availability",
"title": "HTTP response",
"max_points": 40,
"earned_points": 40,
"lost_points": 0,
"detail": "HTTP/2 200 "
},
{
"category": "availability",
"title": "HTTPS final URL",
"max_points": 20,
"earned_points": 20,
"lost_points": 0,
"detail": "Final URL uses HTTPS."
}
],
"methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.",
"diagnostics": [
{
"level": "ok",
"title": "IPv4 (A)",
"detail": "3 IPv4 address(es) detected.",
"category": "dns",
"max_points": 30,
"earned_points": 30,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 (AAAA)",
"detail": "3 IPv6 address(es) detected.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "Name server redundancy",
"detail": "2 NS record(s); 2 or more required.",
"category": "dns",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SOA record",
"detail": "Authoritative zone record.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "DNSSEC chain",
"detail": "DS and DNSKEY detected.",
"category": "dns",
"max_points": 15,
"earned_points": 15,
"lost_points": 0
},
{
"level": "ok",
"title": "CAA policy",
"detail": "Certificate authority restriction.",
"category": "dns",
"max_points": 5,
"earned_points": 5,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS propagation",
"detail": "Agreement between public resolvers.",
"category": "dns",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "ok",
"title": "MX records",
"detail": "3 MX record(s).",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "ok",
"title": "SPF",
"detail": "SPF policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DMARC",
"detail": "DMARC policy published.",
"category": "mail",
"max_points": 25,
"earned_points": 25,
"lost_points": 0
},
{
"level": "ok",
"title": "DKIM",
"detail": "A DKIM selector was verified.",
"category": "mail",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
},
{
"level": "error",
"title": "MTA-STS",
"detail": "Mail transport policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "error",
"title": "TLS-RPT",
"detail": "TLS reporting policy.",
"category": "mail",
"max_points": 5,
"earned_points": 0,
"lost_points": 5
},
{
"level": "ok",
"title": "Valid TLS certificate",
"detail": "67 day(s) remaining.",
"category": "security",
"max_points": 55,
"earned_points": 55,
"lost_points": 0
},
{
"level": "ok",
"title": "Certificate lifetime",
"detail": "Full points require at least 30 days remaining.",
"category": "security",
"max_points": 10,
"earned_points": 10,
"lost_points": 0
},
{
"level": "warning",
"title": "HTTP security headers",
"detail": "1 of 9 evaluated headers detected.",
"category": "security",
"max_points": 35,
"earned_points": 4,
"lost_points": 31
},
{
"level": "error",
"title": "PTR reverse DNS",
"detail": "PTR not detected.",
"category": "network",
"max_points": 30,
"earned_points": 0,
"lost_points": 30
},
{
"level": "ok",
"title": "IPv4 diversity",
"detail": "Two or more IPv4 addresses receive full points.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "IPv6 connectivity",
"detail": "AAAA availability.",
"category": "network",
"max_points": 35,
"earned_points": 35,
"lost_points": 0
},
{
"level": "ok",
"title": "DNS resolution",
"detail": "At least one address family must resolve.",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTP response",
"detail": "HTTP/2 200 ",
"category": "availability",
"max_points": 40,
"earned_points": 40,
"lost_points": 0
},
{
"level": "ok",
"title": "HTTPS final URL",
"detail": "Final URL uses HTTPS.",
"category": "availability",
"max_points": 20,
"earned_points": 20,
"lost_points": 0
}
]
},
"dns": {
"records": {
"A": [
"104.26.0.71",
"172.67.70.57",
"104.26.1.71"
],
"AAAA": [
"2606:4700:20::681a:47",
"2606:4700:20::681a:147",
"2606:4700:20::ac43:4639"
],
"CNAME": [],
"MX": [
"10 aspmx3.googlemail.com.",
"1 aspmx.l.google.com.",
"5 alt1.aspmx.l.google.com."
],
"TXT": [
"\"google-site-verification=NAqOk_BUumwjm_4jnyZrQ2ofEODLMV5Xv9NsSHBYI0o\"",
"\"linkedin-site-verification=2c4b1772-42cd-4569-8a35-74215d201fed\"",
"\"google-site-verification=v3ob24tkVMhR_bV34qmJibap-MeuL8lEvjLJvUp8cVA\"",
"\"google-site-verification=6J796LbyMEl7LxKQ7azlyAuNt8aNcjb_2woofEif-rA\"",
"\"google-site-verification=0NDDIfsSqrQrAm5MIoHRl5poi4QxNfBgYSVtQDF2oks\"",
"\"v=spf1 include:_spf.google.com include:servers.mcsv.net include:46095657.spf06.hubspotemail.net include:_spf.thenewstack.io ~all\""
],
"NS": [
"ace.ns.cloudflare.com.",
"deborah.ns.cloudflare.com."
],
"SOA": [
"ace.ns.cloudflare.com. dns.cloudflare.com. 2411593565 10000 2400 604800 1800"
],
"CAA": [
"0 issue \"comodoca.com\"",
"0 issuewild \"pki.goog; cansignhttpexchanges=yes\"",
"0 iodef \"mailto:sysadmin@thenewstack.io\"",
"0 issuewild \"letsencrypt.org\"",
"0 issue \"pki.goog; cansignhttpexchanges=yes\"",
"0 issue \"amazon.com\"",
"0 issue \"letsencrypt.org\"",
"0 issuewild \"comodoca.com\"",
"0 issuewild \"digicert.com; cansignhttpexchanges=yes\"",
"0 issue \"ssl.com\"",
"0 issue \"amazontrust.com\"",
"0 issue \"awstrust.com\"",
"0 issuewild \"ssl.com\"",
"0 issue \"amazonaws.com\"",
"0 issue \"digicert.com; cansignhttpexchanges=yes\""
],
"DS": [
"2371 13 2 41057DDD534E178A465B4A3B692E19AAC9E8CD7CEFD89B7A8D0BA343 D0FA7E94"
],
"DNSKEY": [
"256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8 KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==",
"257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ=="
],
"RRSIG": [],
"NSEC": [
"\\000.thenewstack.io. A NS SOA PTR HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA HIP CDS CDNSKEY OPENPGPKEY SVCB HTTPS URI CAA"
],
"NSEC3": [],
"SRV": [],
"NAPTR": [],
"TLSA": [],
"SSHFP": []
},
"ipv4": [
"104.26.0.71",
"172.67.70.57",
"104.26.1.71"
],
"ipv6": [
"2606:4700:20::681a:47",
"2606:4700:20::681a:147",
"2606:4700:20::ac43:4639"
]
},
"mail": {
"spf": "v=spf1 include:_spf.google.com include:servers.mcsv.net include:46095657.spf06.hubspotemail.net include:_spf.thenewstack.io ~all",
"dmarc": "v=DMARC1; p=quarantine; rua=mailto:39455e4c433f43ac8408eeba5aa1d98a@dmarc-reports.cloudflare.net,mailto:re+f3tcg4qotcm@dmarc.postmarkapp.com;",
"dkim_selector": "google",
"dkim_host": "google._domainkey.thenewstack.io",
"dkim": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcCU+nVf5ktfnuwxQOA1Gm3iJCeoZgSlN/0/8D8D9uX/+mFr2I7zBots8Us78lgs4NC+KNC+Ip/PFK/AddRPKPspT2tFMIQRwlOhAkpI95w0FHMqM/AUoT6czet3BCJWZ30aXWcuxJjyyiRkGs6GjbTpRVNili0SjznmRgY/ak6v7C0JPZ++wf59ULL/1y152kleZRIQxUV6DKFHaqvFHP1FvDokVfUiFM/1TJGz9p0Y3Zu+/YD9xOWZmLFDNamGWGtwUCNpNy21gSGa8aAAtPFhDPDaR36+Rcu+MR5iz4UxdsTTHqdDiI+zzPcQXhjIaFQJEH4ME/m67AVhTrKLmQIDAQAB",
"spf_analysis": {
"valid": true,
"lookups": 4,
"final": "~all",
"message": "Within the estimated limit"
},
"dmarc_analysis": {
"valid": true,
"policy": "quarantine"
},
"bimi": "",
"mta_sts": "",
"tls_rpt": ""
},
"advanced": {
"ptr": "",
"propagation": {
"consistent": true,
"results": [
{
"provider": "Google",
"server": "8.8.8.8",
"result": [
"104.26.0.71",
"104.26.1.71",
"172.67.70.57"
],
"time_ms": 214.2
},
{
"provider": "Cloudflare",
"server": "1.1.1.1",
"result": [
"104.26.0.71",
"104.26.1.71",
"172.67.70.57"
],
"time_ms": 26.64
},
{
"provider": "Quad9",
"server": "9.9.9.9",
"result": [
"104.26.0.71",
"104.26.1.71",
"172.67.70.57"
],
"time_ms": 30.19
},
{
"provider": "OpenDNS",
"server": "208.67.222.222",
"result": [
"104.26.0.71",
"104.26.1.71",
"172.67.70.57"
],
"time_ms": 53.67
},
{
"provider": "AdGuard",
"server": "94.140.14.14",
"result": [
"104.26.0.71",
"104.26.1.71",
"172.67.70.57"
],
"time_ms": 599.86
}
]
}
},
"ssl": {
"available": true,
"issuer": "Google Trust Services",
"subject": "thenewstack.io",
"valid_from": "2026-07-18T02:13:09-05:00",
"valid_to": "2026-10-16T03:12:48-05:00",
"days_remaining": 67,
"san": [
"thenewstack.io",
"*.thenewstack.io"
],
"protocol": "TLSv1.3",
"cipher": "TLS_AES_256_GCM_SHA384"
},
"http": {
"url": "https://thenewstack.io/",
"status": "HTTP/2 200 ",
"http_version": "3",
"headers": {
"date": "Sun, 09 Aug 2026 15:58:06 GMT",
"content-type": "text/html; charset=UTF-8",
"cf-ray": "a287f5d8cc92b266-ORD",
"cf-cache-status": "DYNAMIC",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"server": "cloudflare",
"cf-apo-via": "origin,nohtml",
"cf-edge-cache": "cache,platform=wordpress",
"x-frame-options": "SAMEORIGIN",
"vary": "accept-encoding",
"report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FedsMr%2B9twNnE3iIo5TQ3Syfmr20ex8xNWnBFNwi4%2FyNOMEUYR%2BDZzw91GWb3b%2BVQr2tEy88zC0FL2M8dX7O8AF3Ib1GNSnnyppNcMwYCTZdE%2BD20QHMrnvstUVU%2BujJ\"}]}",
"nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
"alt-svc": "h3=\":443\"; ma=86400"
},
"security_checks": {
"strict-transport-security": false,
"content-security-policy": false,
"x-content-type-options": false,
"x-frame-options": true,
"referrer-policy": false,
"permissions-policy": false,
"cross-origin-opener-policy": false,
"cross-origin-embedder-policy": false,
"cross-origin-resource-policy": false
},
"server": "cloudflare",
"powered_by": ""
},
"webpage": {
"url": "https://thenewstack.io/",
"title": "The New Stack | DevOps, Open Source, and Cloud Native News",
"description": "The latest news and resources on cloud native technologies, distributed systems and data architectures with emphasis on DevOps and open source projects.",
"success": true,
"error": "",
"status": 200
},
"network": {
"104.26.0.71": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"172.67.70.57": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
},
"104.26.1.71": {
"success": false,
"country": "",
"region": "",
"city": "",
"asn": "",
"organization": "",
"isp": ""
}
},
"smtp": {
"host": "aspmx3.googlemail.com",
"ports": [
{
"port": 25,
"open": false,
"time_ms": 0.9,
"banner": "",
"error": "Network is unreachable"
},
{
"port": 465,
"open": false,
"time_ms": 4020.7,
"banner": "",
"error": "Connection timed out"
},
{
"port": 587,
"open": false,
"time_ms": 4043.4,
"banner": "",
"error": "Connection timed out"
}
]
},
"visitor": {
"ip": "216.73.217.62",
"reverse": "",
"country": "",
"country_code": "",
"region": "",
"city": "",
"latitude": null,
"longitude": null,
"isp": "",
"organization": "",
"asn": "",
"timezone": "",
"browser": "Other",
"os": "Other",
"language": "",
"user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"is_bot": true,
"cloudflare": false
},
"analysis_time_ms": 129.6
}